CVE-2010-1455

CWE-20 — Improper Input Validation7 documents7 sources
Severity
4.3MEDIUM
EPSS
1.0%
top 23.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Ethereal Group EtherealWireshark Wireshark
Timeline
PublishedMay 12
Latest updateMay 2

Description

The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶Debianwireshark< 1.2.8-1+3
▶NVDwireshark/wireshark31 versions+30
▶NVDethereal_group/ethereal4 versions+3

Patches

Patch: www.vupen.com ↗Patch: www.vupen.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-7g9q-vjv3-946c: The DOCSIS dissector in Wireshark 0↗2022-05-02
▶
OSV
CVE-2010-1455: The DOCSIS dissector in Wireshark 0↗2010-05-12
▶
CVEList
CVE-2010-1455: The DOCSIS dissector in Wireshark 0↗2010-05-11
▶

📋Vendor Advisories

2
Red Hat
wireshark: DOCSIS dissector crash↗2010-05-05
▶
Debian
CVE-2010-1455: wireshark - The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 a...↗2010
▶

💬Community

1
Bugzilla
CVE-2010-1455 wireshark: DOCSIS dissector crash↗2010-05-10
▶